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three-dimensional particle distribution. Next a two-dimen- 
sional data acquisition step is performed for the purpose of 
authentication. This method is particularly useful for copy 
protection. 
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Method and device for determining the authenticity of an object 



Description 



Field of the invention 

The present invention relates to the field of authentication techniques, and more 
5 particularly without limitation, to authentication of customer cards, financial 
transaction cards and copy protection. 

Background and prior art 

Various sealing and printing techniques to provide authentication and to avoid 
unauthorised replication of products and documents are known from the prior 
10 art. However, an increasing economic damage results from forgery due to 
insufficient security. 

For authenticating documents and things U.S. Pat. No. 5,145,212 teaches the 
use of non-continuous reflective holograms or diffraction gratings. Such a 
hologram or diffraction grating is firmly attached to a surface that contains visual 

15 infomnation desired to be protected from alteration. The reflective discontinuous 
hologram is formed in a pattern that both permits viewing the protected 
information though it and the viewing of an authenticating image or other light 
pattern reconstructed from it in reflection. In another specific authentication 
application of this U.S Patent a non-transparent structure of two side-by-side 

20 non-continuous holograms or diffraction patterns, each reconstmcting a 
separate image or other light pattem, increases the difficulty of counterfeiting 
the structure. 
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PCT application WO087/07034 described holograms, including diffraction 
gratings, that reconstruct an Image which changes as the hologram is tilted with 
respect to the viewer and in a manner that images reconstructed from copies 
made of the hologram in monochromatic light do not have that motion. 

5 In UK Patent Application GB 2 093 404 sheet material items which are subject 
to counterfeiting have an Integral or bonded authenticating device which 
comprises a substrate having a reflective diffractive structure fonned as a relief 
pattern on a viewable surface thereon and a transparent material covering the 
structure. Specified grating parameters of the diffractive structure result in 

10 peculiar, but easily discemable» optical colour properties that cannot be copied 
by colour copying machines. 

U.S. Pat. No. 4,661,983 described a random-pattem of microscopic lines or 
cracks having widths in the order of micrometers that inherently fonns in a 
dielectric coating of an authenticating device incorporated in a secure 
IS document, it permits identification of a genuine individual document by 
comparing read-out line-position infomiation derived by microscopic Inspection 
with read-out digital codes of line-infomnation obtained eariier at the time of 
fabrication of the document. 

US Patent No. 5,856,070 shows an authentication label containing a light 
20 diffracting structure. Unique parameters are randomly defined in the light 
diffracting structure by anisotropic process steps not under full control of the 
producer during the manufacturing of the diffracting structure to prevent copying 
or creating an exact replica thereof. The resultant uniquely coloured 
authenticating pattern can be verified by simple observation with the naked eye. 

25 US Patent No. 4,218,674 shows an authentication method and system that 
uses an object being of base material having random imperfections. The 
random imperfections are converted into pulses along a pre-determined 
measuring track over the suri'ace of the object of base material. 
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Summary of the invention 

The present invention provides for an authentication method which is based on 
an authentication object, such as an authentication label, having a three- 
dimensional pattern of distributed particles. By means of a two-dimensional 
5 data acquisition performed on the object a code is obtained that is used for the 
purpose of authentication. 

When the autiienticlty of the object needs to be checked the same two- 
dimensional data acquisition step is performed again in order to provide a 
check-code. On the basis of the code and the check-code the authentication is 
10 perfomied. For e)^mple, if the code and the check-code are identical, ttiis 
means ttiat the object is an original and not an unauthorised copy. 

The present invention is particularly advantageous as authentication is based 
on the three-dimensionality of the particle distribution within the object. If it is 
determined for tiie purposes of authentication that an object does in fact have a 
IS three-dimensional pattern of distributed particles it is sufficient to perform the 
consecutive data acquisition in two-dimensions. This approach is based on the 
discovery that it is most difficult if not impossible to copy the particle 
distributions in two-dimensions in case the particles are distributed in three- 
dimensions. 

20 In accordance with a preferred embodiment of the invention the particles that 
are distributed in the object are magnetic. The two-dimensional data acquisition 
is performed by scanning the object by means of a magnetic head. 

In accordance with a furUier prefenred embodiment of the invention an image of 
the object is acquired in the two-dimensional data acquisition step. The image 
25 is scanned and filtered In order to obtain a data vector. Preferably the filtering 
involves some kind of averaging in order to increase the robustness of the 
method. 

In accordance with a further preferred embodiment of the invention binary data 
is encr^ted by means of the code acquired from the two-dimensional data 
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acquisition in oitler to provide a code for the authentication. Preferably the 
binary data is a symmetric key that is used for encryption and decryption of 
mass data. 

In accordance with a further prefenred embodiment of the invention the code 
5 acquired from the object by means of the two-dimensional data acquisition is a 
reference data vector. For encoding of each bit of the binary data a random 
vector is detennined on the basis of the reference data vector. This encryption 
method is particularly advantageous as the key management problem is 
avoided. In contrast to prior art encryptfon it is not perfomied on the basis of an 
10 exact key but on the basis of a reference object from which a reference data 
vector data is acquired. 

In accordance with a further preferred embodiment of the invention a data 
object is used as a reference object. For acquisition of a reference data vector 
the data object is rendered by means of a rendering program, such as a text 
IS processing program in case the data object is a text document, and the data 
acquisition is perfomied on the rendered data object. 

In acconJance with a further prefenred embodiment of the invention the random 
vector for encoding one of the bits is determined by generating a candidate 
random vector and by calculating the scalar product of the candidate random 

20 vector and the reference data vector. In case the absolute value of the scalar 
product is (i) above a pre-defined threshold value and (ii) the sign of the scalar 
product conresponds to the bit to be encoded, the candidate random vector is 
accepted for encoding of the bit and stored. In case the candidate random 
vector does not fulfil these two requirements (i) and (ii) another candidate 

25 random vector is generated and the conditions are tested again. This 
procedure continues until a candidate random vector is identified that fulfils both 
conditions. 

In accordance with a further preferred embodiment of the invention a njnning 
index of the accepted candidate random vector is stored rather than the 
30 complete candidate random vector. The combination of the running index and 
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the seed value of the pseudo random number generator that is used for 
generating of the random vectors unequivocally identifies the complete random 
vector. This way the size of the result of the encryption can be reduced 
drastically. 

5 In accordance with a further preferred embodiment of the invention a data file is 
encrypted. For example a user can encrypt a data file on his or her computer 
on the basis of the authentication object in order to protect the data file against 
unauthorised access. 

In accordance with a further prefen^ embodiment of the Invention a user's 
10 personal data, such as the user's name as printed on his or hers passport or 
chip card, Is encrypted. This is useful for checking the authenticity of the 
passport or chip card. 

In accordance with a further preferred embodiment of the invention a symmetric 
key is encrypted on the basis of the reference object. For example, the 
15 symmetric key is used for encryption of a large data file. The symmetric key 
itself is encrypted in accordance with a method of the present invention on the 
basis of the authentication object. This way the symmetric key is protected in a 
secure way while avoiding the disadvantages of prior art key management 
approaches. 

20 In another aspect the present invention provides a method of encrypting and 
decrypting binary data. The binary data is assigned a random vector for each 
encoded bit The decoding is performed by acquiring a reference data vector 
from a reference object. The decryption of one of the bits is performed on the 
basis of one of the random vectors and the reference data vector. 

25 In accordance with a prefenred embodiment of the invention the decryption of 
one of the bits is performed by determining the sign of the scalar product of the 
reference data vector and the one of the random vectors. 

Decryption of the encrypted binary data is only possible if the reference object is 
authentic. It is to be noted that the reference data vector that was used for the 
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encryption does not need to be reproduced in an exact way for tlie decryption; 
some degree of error in the acquisition of the reference data vector is allowed 
witiiout negatively affecting the decryption. 

The present invention is particularly advantageous in that it facilitates the 
5 solution of the prior art key management problem in a user friendly, convenient 
and yet secure way. The present invention can be used in various fields for the 
purposes of protecting the confidentiality of data and for the purpose of 
authentication of documents or files. 

In another aspect the present invention relates to copy protection, in 
10 accordance with a preferred embodiment of the invention the mass data to be 
stored on a data earner, such as an optical recording device, e.g. a CD or DVD, 
is first encoded by means of a symmetric key before it is stored on the data 
carrier. A reference object is attached to the data canrier or forms an integral 
part of Uie data carrier such that the reference object cannot be removed 
IS without destroying the object and / or the data earner. 

The symmetric key that was used for encrypting the mass data stored on tiie 
data cam'er is encrypted by means of a reference data vector acquired from tiie 
reference object of the data carrier. The resulting set of random vectors is 
stored on the data cam'er. This can be done by attaching a label, such as a bar 
20 code label to the data carrier or a data carrier coven and/or by digitally storing 
tile set of random vectors on ttie data canrier. Depending on the implementation 
the seed value that was used for generating the random vectors together with 
tile mnnlng indices Is stored rather than tiie complete random vectors. 

In accordance with a further prefen-ed embodiment of the invention an image of 
25 the object is acquired in a read position. The read position may be dislocated 
from a reference position defined by markers on the object due to mechanical 
tolerances of the read apparatus. The amount of the dislocation of the read 
position with respect to a reference position is measured by detecting of tiie 
maricer positions in the image. Next a projective transfomfiation is perfomried on 
30 the image for compensation of the dislocation. 
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Brief description of tiie drawings 

In the following, preferred embodiments of the invention will be described, by 
way of example only, and with reference to the drawings, in which: 

Figure 1 is illustrative of a first embodiment of an authentication label, 

S Figure 2 is illustrative of a second embodiment of an authentication label, 

Figure 3 is a flow chart for generating an authentication code for an 
authentication label, 

Figure 4 is a flow chart for generating an authentication code by encrypting 
binary data, 

10 Figure 5 illustrates the result of the encryption of figure 4, 

Figure 6 is a flow chart for generating the authentication code by means of 
a pseudo random number generator, 

Figure? is a block diagram of an image processing and encoding 
apparatus for generating an authentication code for an 
IS authentication label, 

Figure 8 is illustrative of a grid that is used for flitering an image, 

Rgure9 is a flow diagram for determining the authenticity of an 
authentication label, 

Figure 10 is a flow diagram for determination of the authenticity of an 
20 authentication label by decrypting the binary data, 

Figure 11 is a flow diagram for perfomning the method of figure 10 by means 
of a pseudo random number generator, 



Figure 12 is illustrative of a method for determining if the authentication label 
has a three-dimensional pattern of distributed particles, 
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Figure 13 is illustrative of an alternative method for determining If tiie 
authentication label has a three-dimensional pattern of distributed 
particles, 

Figure 14 is illustrative of a further alternative method for detennining if the 
5 authentication label has a tiiree-dimensional pattern of distributed 

particles, 

Figure 15 shows an optical recording medium with an attached or Integrated 
authentication label, 

Figure 16 shows a block diagram of a reader for the optical recording 
10 medium of figure 1 5. 

Detailed description 

Figure 1 shows authentication label 100. Authentication label 100 has canier 
layer 102 with embedded particles 104. The particles 104 are randomly 
disbibuted witti canrier layer 102, such that the positions of the particles 104 
15 within carrier layer 1 02 define a random three-dimensional pattern. 

Carrier layer 102 consists of a translucent or transparent material, such as a 
syntiietic resin or transparent plastic material, which enables to optically 
determine the positions of particles 104. For example, carrier layer 102 has a 
thickness 106 of between 0,3 to 1 mm or any other convenient thickness. 

20 Particles 104 can be glass beads or balls, or disks, metallic or peariescent 
pigments witii or without a light reflecting coating or any other convenient fomn 
or type of particle. The particles can be optically detected due to their reflective 
coating, or in the absence of such reflective coating, due to their reflection 
coefficient which is different to the material of the cam'er layer 102. Preferably 

25 particles 104 are 5 to 200 micrometers in diameter. For example, particles 104 
can be optical lens elements to provide the authentication label 100 with a 
reflective effect. 
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Preferably authentication label has adhesive layer 108 in order to glue 
authentication label 100 to a product of document The material properties of 
earner layer 102 and adhesive layer 108 are chosen such that an attempt to 
remove authentication label 100 from the product or document would result in 
5 destruction of authentication label 1 00. 

Figure 2 shows an alternative embodiment where like reference numerals are 
used to designate like elements as in figure 1. In the embodiment of figure 2 
particles 204 within earner layer 202 of authentication label 200 are metallic or 
pearlescent pigments. Again the thickness 206 of canier layer 202 is about 0,3 
10 to 1 mm or any other convenient thickness. 

For example, authenticatton label 200 has the size of a post stamp, which is 3 x 
4 mm and contains about two hundred particles 204. The random distribution of 
the two hundred particles within canier layer 202 provides a sufficient 
uniqueness of authentication label 200. 

IS Figure 3 shows a flow chart for generating an authentication code on the basis 
of an authentication object such as an authentication label as described in 
figures 1 and 2. 

In step 300 an authentication object having a three-dimensional pattern of 
randomly distributed particles is provided. For example, the authentication 
20 object is a piece of scotchlite tape, which Is commercially available from 3M. 

In step 302 a two-dimensional data acquisition step is performed. This can be 
done by acquiring a two-dimensional image of a surface of the authentication 
object. Alternatively the authentication object is scanned in two-dimensions by 
other measurement means. For example, if the particles that are distributed in 
25 the object are magnetic a magnetic head can be used for performing the two- 
dimensional data acquisition. 

The measurement data that results from the two dimensional data acquisition 
perfomied in step 302 is filtered in step 304. Preferably the measurement data 
are low pass filtered. For example, measurement data acquired from the same 
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region of the surface of the authentication object are averaged. These regions 
are predetermined by a virtual grid. 

In step 306 the authentication code is provided. 

In order to perfomn an authentication of the authentication object, steps 300 to 
5 306 are performed again. The object is authentic if the following two conditions 
are fulfilled, 

(i) the particles are randomly distributed in three dimensions within 
the object, and 

(ii) the resulting codes are identical. 

10 This will be explained In greater detail below by making reference to figure 9. 

Figure 4 shows an alternative flow chart for providing the authentication code. 
The authentication code is provided by encryption of I bits of binary data Bi, B2, 
B3, Bj,... B|. A reference authentication object, such as an authenfication 
label as described in figures 1 and 2, is used as a basis for the encryption. 

IS Depending on the kind of reference object a data acquisition step Is performed 
(step 400). This way the reference data vector | is obtained (step 402) that has 
a number of k values obtained from the reference data object. 

Preferably there is some kind of filtering of the raw data acquired firom the 
reference object in order to provide the reference data vector | , For example, 
20 the raw data is filtered by a low pass filter for Increased robustness of the 
encoding and decoding method. 

Further, it is useful to nonmalize the data vector data vector | . This way all 
values are within a defined range, such as between [-1; 1]. 

In step 404 the I bits to be encrypted are entered. In step 406 the Index j is 
25 initialised. In step 408 a first candidate random vector R is generated by 
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means of a random number generator. The random vector R has the same 
dimension k as the reference data vecbr | . 

In step 410 the scalar product of the reference data vector and the candidate 
random vector is calculated. If the absolute value of this scalar product is 
5 above a predefined threshold level e a first condition is fulfilled. If the sign of 
the scalar product matches the bit Bj to be encoded this means that the 
candidate random vector can be accepted for encoding of bit B| . 

For example of the bit Bj is 'O' the sign of the scalar product needs to be • - • and 
if Bj = 1 then the sign of the scalar product needs to be ' + 

10 In other words the candidate random vector R is accepted for encrypting bit B| 
if both of the following conditions are met: 



If one of the conditions (i) and (ii) is not fulfilled the control goes back to step 
408 for generation of a new candidate random vector which is then tested 
against the two conditions (I) and (ii) in step 410. Steps 408 and 410 are 
carried out repeatedly until a candidate random vector has been found that 
20 fulfils both of the conditions of step 410. The accepted candidate random 
vector constitutes row j of matrix M (step 412). In step 414 index j is 
implemented and the control goes back to step 408 for encoding of the next bit 
Bj of the I bits to be encrypted. 



(0 




and 




15 
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After encryption of all I bits the control goes to step 416 where the matrix M Is 
outputted as a result of the encryption. 

It is to be noted that the choice of threshold e \sa trade off between security, 
measurement tolerance and processing time. Increasing s increases the 

5 average number of attempts for finding an acceptable candidate random vector 
but also increases the acceptable measurement tolerance. Decreasing e 
increases the security level and decreases the processor power requirement, 
but decreases the acceptable measurement tolerance. A convenient choice for 
is 1 , 2, 3. 4, 5, or 6, preferably between 3 and 4. most probably s = 3.7 if the 

10 reference data vector dimension (k) is 256 and the required measurement 
tolerance is 5%. 

In any other cases a good choice for s is 

e = 8*rsqrt{k/3) 

where T is the required measurement tolerance (5% is 7=0.05) and k is the 
15 reference data vector dimension and sqrt() function is the nonnal square root 
function. 

Figure 5 shows the resulting matrix M that has a number of I rows and k 
columns. Each row j of matrix M is assigned to one of the bits Bj and contains 
the random vector that encodes the respective bit Bj . 

20 Decryption of matrix M in order to recover the encrypted bits is only possible rf 
the decryptor is in the possession of the reference object that was used for the 
encryption (cf. Step 400 of Fig. 4) as the reference data vector | is not stored 
in the matrix M or elsewhere. 

A conresponding decryption method is explained in greater detail below by 
25 making reference to figure 1 0. 

For example, the resulting matrix M is stored by printing a bar code on a secure 
document carrying the authentication object. Alternatively or in addition the 
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matrix M can also be stored electronically in case the secure document has an 
electronic memory. 

Figure 6 shows a prefen-ed emiDodiment of the encryption method of figure 4 
that enables to compress the result of the encryption operation. Steps 600 and 

5 602 are identical to steps 400 and 402 of figure 4. In step 603 a seed value for 
the pseudo random number generator is entered. In step 604 a symmetric key 
having a length I is entered. This con-esponds to step 404 of figure 4. In 
addition to the initialisation of index j in step 606 (con-esponds to step 406 of 
figure 4) index m is initialised in step 607. Index m is the running index of the 

10 random number generator. 

In step 608 the first random vector R^^ of k random numbers R| is generated 
by the pseudo random number generator on the basis of the seed value. This 
candidate random vector is evaluated in step 610 in the same way as in step 
410 of figure 4. In case the candidate random vector is accepted as it 
15 fulfils the conditions of step 610 only the oinning index m is stored in step 612 
as an element of the sequence S that results from the encryption. 

Step 614 conesponds to step 414. In step 616 the sequence 8 containing a 
number of I running indices is outputted rather than a matrix M having a number 
20 of I X k random numbers. Hence, by storing the running indices and the seed 
value rather than the random vectors themselves a drastic compression of the 
result of the encoding operation is obtained. 

Figure 7 shows a block diagram of an image processing and encoding 
25 apparatus 700. Image processing and encoding apparatus 700 has light source 
702 and optical sensor 704 for taking an image of authentication label 706. For 
example, authentication label 706 has a similar design as authentication label 
100 (cf. figure 1) and authentication label 200 (cf. figure 2). In addition, 
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authentication label 706 has position markers 708 that relate authentication 
label 706 to a reference position. 

Optical sensor 704 is coupled to image processing module 710. Image 
processing module 710 has an image processing program that can filter the 
5 image data required by optical sensor 704. 

Image processing module 710 is coupled to encoding module 712. Encoding 
module 712 receives the filtered measurement data from image processing 
module 710. Encoding module 712 is coupled to a storage 714 in order to store 
the result of the encoding for later usage. For example, the image processing 
10 and encoding is done for a sequence of authentication labels for the purpose of 
mass production of data earners, passports, bank cards, or other secure 
documents. 

In this case a sequence of authentication codes is stored in storage 714 during 
the mass production. These authentication codes can be printed and mailed to 
15 the users independently from the mailing of the authentication labels 706. For 
example, the authentication label 706 are attached to customer cards or 
financial transaction cards, such as ATM-cards, that are mailed to the 
customers. The customers receive the con^esponding authentication codes by 
separate mail. 

20 Preferably image processing and encoding apparatus 700 has random number 
generator 716. Preferably random number generator 71 6 is a pseudo random 
number generator. 

Preferably image processing module 710 delivers reference data vector | (cf. 
step 402 of figure 4 and step 602 of figure 6). Encoding module 712 performs 
25 steps 406 to 41 6 of figure 4, or if random number generator 71 6 is a pseudo 
random number generator, steps 606 to 616 of figure 6. The resulting matrix M 
or sequence S is stored in storage 714. 
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As a matter of principle the I bits Bi. B2. B3. ... Bi that are encrypted by encoding 
module 712 can be of any kind. For example the ASCII code of a user name or 
other personal data Is encrypted. Alternatively a random number such as a pin 
code that is only known by the user is encrypted. 

5 As a further alternative a symmetric key is encrypted. The symmetric key is 
used for encryption of mass data stored on a data canier. Decryption of the 
mass data is only possible by an authorised user who is in possession of the 
authentication label 706 and matrix M or sequence S depending on the 
implementation. The later application is particulariy useful for the purpose of 

10 copy protection as it will be explained In greater detail below by making 
reference to figures 15 and 16. 

Figure 8 shows grid 800 that has grid elements 802. Grid 800 can be used by 
image processing module 710 (cf. figure 7) for the purpose of filtering image 
data acquired by optical sensor 704. For example Image processing module 

15 710 calculates a nonnalised average grey value for each one of the grid 

elements 802. The nonnalised and averaged grey values provide the reference 
data vectors | for the encryption and |' for the decryption. It is to be noted that 
various other image processing and filtering procedures can be employed to 
provide the reference data vectors on the basis of the image data acquired by 

20 optical sensor 704. 

Figure 9 shows an authentication method that is based on an authentication 
object or label (cf. fig. 1 and 2) as explained above, in particular with reference 
to figures 1, 2 and 3. In step 900 e.g. an authentication card with an attached 
authentication label is inserted into a card reader. In step 902 the user is 
25 prompted to enter his or hers authentication code into the card reader, e.g. the 
code provided in step 306 of figure 3. 

In step 904 the card reader makes a detemiination whether the authentication 
label has a three-dimensional pattem of particles or not. This can be done by 
various methods. Prefen-ed embodiments of how this detemiination can be 
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done will be explained in more detail by making reference to the figures 12, 13 
and 14 below. 

If it is determined in step 904 that there is no three-dimensional pattern of 
distributed partides in the authentication label, a con'esponding refusal 
5 message is outputted by the card reader in step 906. 

If the contrary is tme. the authentication procedure goes on to step 908, where 
a two-dimensional data acquisition procedure on the authentication label is 
performed- As it has been determined before that there is in fact a three- 
dimensional distribution pattem of the parHcles it is sufRdent to acquire the data 
10 from the authentication label in only two dimensions. 

In step 910 the measurement data obtained from the data acquisition perfonned 
in step 908 is filtered to provide a chec!< code in step 912. It is to be noted that 
steps 908 to 91 2 are substantially identical to steps 302 to 306 of figure 3. In 
case the authentication label is authentic the check code obtained in step 912 
15 will be identical to the code obtained in step 306. This Is checked in step 914. 

In case the codes are not identical a refusal message is outputted by the card 
reader in step 916. If the codes are in fact identical an acceptance message Is 
outputted in step 918 by the card reader. Alternatively an action is perfonned or 
enabled depending on the field of application of the authentication method, such 
20 as banking, access control, financial transaction, or copy protection. 

Figure 10 illustrates a decryption method that corresponds to the encryption 
method of figure 4. 

In step 1000 the matrix M is entered. In step 1002 data is acquired from the 
reference object. On this basis the reference data vector |' Is obtained (step 
25 1004). It is to be noted that the data acquisition step 400 of figure 4 and data 
acquisition step 1002 of figure 10 are substantially identical. However, in case 
the reference object is a physical object the data acquisition will involve some 
kind of measurement error. 
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As a consequence the raw data obtained from the measurements of the 
reference object will not be exacHy the same in step 400 figure 4 and step 1002 
of figure 10. As a consequence reference data vector |' provided in step 1004 
will also not be identical to reference data vector # provided in step 402 of 
5 figure 4. Despite such differences between the reference data vector | that 
was used for the encoding and the reference data vector |' that fomis the basis 
of the decoding, a conrect decoding of the matrix M can be perfonmed In order to 
obtain the 'hidden' bits Bi ... Bj.... B| : 

In step 1006 the index j Is initialised. In step 1008 the scalar product of the 
10 reference data vector |' and the random vector in row j of matrix M that is 
assigned to bit Bj is calculated. The sign of the scalar provides the decoded bit 
value Bj whereby the same convention as for the encoding is used. In other 
words, when the sign is negative, the bit value is '0'; if the sign is positive the bit 
value Bj is '1'. 

15 In step 1010 the index j Is incremented and the control goes back to step 1008 
for decoding the next bit position. Steps 1008 and 1010 are carried out 
repeatedly until ail I bit positions have been decoded. The decoded I bits are 
outputted in step 1012. 

It is to be noted that the above described encryption and decryption methods 
20 are particularly advantageous as they are enor tolerant in view of unavoidable 
measurement errors In the data acquisition from the reference object. Typically 
the reference data vectors used for the encryption and for the decryption will not 
be exactly the same but still a correct decryption result is obtained with a high 
degree of reliability and security. 

25 In case the decoded I bits outputted in step 1012 are identical to the original bits 
that have been inputted in step 404 (cf. figure 4) the reference object is 
authentic, othenvise the reference object is refused. 
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Rgure 11 shows an alternative decryption method that is based on pseudo 
random vectors. The decryption method of figure 1 1 corresponds to encryption 
method of figure 6. 

In step 11 00 the sequence S Is inputted. The seed value that was used for the 
5 encoding (cf. step 603 of figure 6) Is Inputted In step 1101. Steps 11 02, 11 04, 
1106 are substantially Identical to the conrespondlng steps 1002, 1004 and 
1006 of figure 10. 

in step 1107 a pseudo random generator that operates in accordance with the 
same algorithm as the pseudo random number generator that has been used 
10 for the encryption is used to recover the random vector based on the seed 
value entered in step 1 101 . This way the random vector that is represented by 
the running index sj in the sequence S is recovered. 

The following step 1 1 08 is Identical to step 1 008 of figure 10. In step 1 11 0 the 
index j Is incremented. From there the control retums to step 1 1 07 for recovery 
15 of the consecutive random vector having the running Index Sj .In step 1 1 12 the 
result of the decoding is outputted. 

Figure 12 shows authentication label 100 (cf. figure 1). In order to detennine 
whether there is a three-dimensional pattern of particles within authentication 
label 100 or not three Images of authentication label 100 are talcen in a 
20 sequence by means of camera 1200. The first Image is tal<en with diffuse light 
source 1202 switehed on and difftise light sources 1204 and 1206 switched off. 

The second image is taken with light sources 1202 and 1206 switched off, while 
light source 1206 illuminates authentication label 100 from still another 
iilumination angle. 

25 The three images are combined to provide a resulting Image. The combination 
can be done by digitally superimposing and adding the digital Images. If there 
is in fact a three-dimensional distribution pattern of particles within 
authentication label regular geometric artefacts must be present In the resulting 
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Image. Such artefacis can be detected by a pattern recognition step. In the 
case of three light sources the geometric artefacts, which are produced, are 
triangles of similar size and shape. This effect is not reproducible by means of 
a two-dimensional copy of the original authentication label 100. 

5 As an attemative, more than three light sources at different illumination angles 
can be used for taking a con-esponding numbers of images, which are 
superposed and added. Changing the number of light sources also changes 
the shape of the geometric artefact in the resulting image. 

Figure 13 shows an alternative method for detemiining the three-dimensionality 
10 of the distribution pattern of the particles within authentication label 100. For 
this application is required, that authentication label 100 is reflective. The 
undertying principle is that the reflective effect can not be reproduced by means 
of two-dimensional copy of the authentication label 100. 

The test, whether authentication label 100 is in fact reflective or not, is done as 
15 follows: a first image is taken by camera 1300 with diffuse light source 1302 
switched on. The diffuse light source 1302 will not invoke the reflective effect. 
The second image is taken with diffuse light source 1302 switched off and direct 
light source 1304 switched on. 

By means of half minor 1306 this produces an incident light beam, which is 
20 about perpendicular to the surface of authentication label 100. This light beam 
invokes the reflective effect. By comparing the first and the second images it is 
apparent whether authentication label 100 is reflective or not. This distinction 
can be made automatically by means of a relatively simple image processing 
routine. 

25 Figure 14 shows a further alternative method of detemiining whether the 
distribution pattern of particles is three-dimensional or not. This method 
requires that the particles within authentication label 200 (cf. figure 2) are 
peariescent pigments. 
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Presently, mica pigments coated with titanium dioxide and /or Iron oxide are 
safe, stable and environmentally acceptable for use in coating, cosmetics and 
plastics. The pearlescent effect is produced by the behaviour of incident light 
on the oxide coated mica; partial reflection from and partial transmission 
5 through the platelets create a sense of depth. The colour of the transmitted 
light is complementary to the colour of the reflected light. 

To check the presence of this colour effect, light source 1400 producing diffuse, 
white light and two cameras 1402 and 1404 are used. The cameras 1402 and 
1404 are positioned at opposite sides of authentication label 200. 

10 An incident light beam 1406 is partly reflected by particle 204 Into reflected light 
beam 1408 and partly transmitted as transmitted light beam 1410. If the colours 
of reflected light beam 1408 and transmitted light beam 1410 are 
complementary this means that authentication label 200 could not have been 
produced by two-dimensional copying. 

15 The test whether the colours of reflected light beam 1408 and transmitted light 
beam 1410 are complementary can be made by summing the colour coordinate 
values e.g. using the RGB colour coordinate system. The summation of the 
colour coordinates must result In roughly a constant RGB value. 

Figure 15 shows optical disc 1550, such as a CD or DVD. Optical disc 1550 
20 has an area 1552 that Is covered by a data track. Outside area 1552, such as 
within an area 1554, an angularly shaped authentication label 1556 is glued to 
the surfoce of optical disc 1550 or integrated within optical disc 1550. 
Authentication label 1556 is similar to autiientication label 100 of figure 1 or 
autiientication label 200 of figure 2. 

25 The data track of area 1 552 stores encrypted data, such as audio and / or video 
data, multimedia data, and / or data files. In addition matrix M (cf. step 416 of 
figure 4) or sequence S (cf. step 616 of figure 6) and the seed value are stored 
in tiie data track without encryption. Alternatively a machine readable and / or 
human readable label is attached to optical disc 1550 witii the matrix M or 
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sequence S and seed value printed on It. Preferably the label is glued to the 
back side of optical disc 1550 or within inner area 1554. 

When a user desires to use optical disc 1550, he or she puts optical disc 1550 
into a player or disc drive. The player or disc drive reads the matrix M or the 

5 sequence S and seed value from the optical disc 1550. On this basis the 
authenticity of authentication label 1656 is checked by perfonning the method of 
figure 10 or 1 1 . depending on the implementation. In case authentication label 
1556 is in fact authentic the symmetric key Is recovered and the encrypted 
mass data stored in the data track is decrypted in order to enable playback, 

10 rendering or opening of the files. Othenvise the key is not recovered and 
decryption of the mass data is not possible. 

Figure 16 shows a block diagram of reader 1600 that can be used as a 
playback device for optical disc 1550 (cf. figure 15). Elements of figure 15 that 
con-espond to elements of figure 7 are designated by like reference numerals. 

15 Reader 1600 has slot 1622 with a mechanism for insertion of optical disc 1550. 
Authentication label 1556 is attached to the suri^ace of optical disc 1550 by an 
adhesive or it is integrated within the card. In the latter case the surface of 
optical disc 1550 must be transparent in order to enable to take an image of the 
surface of authentication label 1556. For example, optical disc 1550 is made of 

20 a flexible, transparent plastic that has a smooth outer surface and which 
envelops authentication label 1 556. 

Reader 1600 has at least one light source 1602 for illumination of authentication 
label 1556 when optical disc 1550 is inserted into slot 1622 (cf. the 
implementations of fig. 12 to 14). 

25 Furttier, reader 1600 has optical sensor 1604, such as a CCD camera. Optical 
sensor 1604 is coupled to image processing module 1610 . Image processing 
module 1610 is equivalent to image processing module 710 of figure 7, i.e. it 
provides the same kind of two-dimensional data acquisition and filtering. 
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Image processing module 1610 is coupled to decryption module 1612. 
Decryption module 1612 serves to recover a symmetric key for decryption of 
mass data stored on optical disc 1550 by consecutive decryption module 1617. 
Decryption module 1617 is coupled to rendering module 1618. 

5 Optical reader 1620 is coupled both to decryption module 1612 and decryption 
module 1617. Optical reader 1620 has a laser diode for directing a laser beam 
onto a surface of optical disc 1550 in order to read its data track. 

If the method of figure 6 has been used for the encoding pseudo random 
number generator 1616 is required for the decryption. 

10 Preferably light source 1 602 and optical sensor 1 604 implement any one of the 
anangements of figures 12 to 14 as explained above. 

In the following it Is assumed that the matrix M or the sequence S and seed 
code are stored on the data track of optteal disc 1550. 

In operatfon optical disc 1550 Is Inserted into slot 1622. in response a 
15 determination is made by image processing module 1610 by means of light 
source 1602 and optteal sensor 1604 where there is a three-dimensional 
distribution of particles within authentication label 1556 (cf. figures 12. 13 and 
14). 

If Image processing module 1610 detennines that there is in fact a three- 
20 dimensional particle distribution within autfientication label 1 556 it directs optical 
reader 1620 to read matrix M or sequence S and the seed value from the data 
track of the optical disc 1550. This Infonmatfon Is entered Into decryption 
module 1612. 

Further, optical sensor 1604 acquires Image data fipom authentication label 
25 1556. The image data Is filtered by Image processing module 1610 and the 
resulting data vector |' Is entered into decryption module 1612. Decryption 
module 1612 recovers the symmetric key from the matrix M or the sequence S 
by using the seed value for the random number generator 1616. The resulting 
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symmetric key is provided to decryption moduie 1617. Tiie encrypted mass 
data that is read by optical reader 1620 from optical disc 1550 Is decrypted by 
decryption module 1617 by means of the symmetric key. As a result the 
decrypted mass data Is recovered and rendered by rendering module 1618. 

Alternatively, the matrix M or the sequence S and the seed value are provided 
to the user by means of a separate infomiation canier, such as on a printed 
document. In this implementation the user may need to manually enter the 
matrix M or the sequence S and the seed value into reader 1600. Alternatively, 
the infomiation carrier is machine readable and attached to optical disc 1550. 
in this case the information carrier Is read by means of optical sensor 1604 and 
image processing module 1610 in order to provide matrix M or sequence S and 
the seed value to the decryption module 1612. 
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CLAIMS 

1 . A method of determining the authenticity of an object cofuprising: 

receiving a first code, 

detennining if the object has a three-dimensional pattem of 
distributed particles, 

performing a two-dimensional data acquisition for acquisition of 
a second code from the object. 

determining the authenticity using the first and second codes. 

2. The method of claim 1 , the detennlnatlon If the object has a three- 
dimensional pattem of distributed particles being performed by: 

- acquiring a first image of the object with a first angle of 
iilumination, 

- acquiring a second image of the object with a second angle of 
illumination, 

- combining the first and second images, 

- determining if a geometrical pattem is present in the combined 
images. 

3. The method of claim 1 or 2. wherein the determination if the object has a 
three-dimensional pattern of distributed particles is made by determining 
if ttie object is reflective. 

4. The method of claim 3, wherein it is detemnined whether the objective is 
reflective by acquiring a first image of the object with diffused illumination 
and acquiring a second image of the object with direct illumination and 
comparing a brightness of the object In the first and second images. 
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5. The method of any one of the preceding claims, the detemiination If the 
object has a three-dimensional patlem of distributed particles being 
performed by: 

- illuminating the object with diffused, white light. 

5 . detecting light reflected from the object and light transjjiltted 

through the object. 

. detennining if the reflected light and the transmitted light have 
complimentary colours. 

6. The method of any one of the preceding claims, further comprising: 

10 - acquiring an Image of the object in a read position. 

detennining a dislocation of the read position with respect to a 
reference position by detecting of maricer positions in the Image. 

performing a projective transformation of the image for 
compensation of the dislocation. 

15 7. The method of any one of the preceding claims, wherein the two- 
dimensional data acquisition is perfonned by scanning the object along a 
predefined two-dimensional grid. 

8. The method of any one of the preceding claims, wherein the two- 
dimensional data acquisition step is pert^ormed by acquiring an image of 

20 the object. 

9. The method of any one of the preceding claims, further comprising 
filtering of measurement data acquired by the two-dimensional data 
acquisition in order to provide the second code. 

1 0. The method of claim 9, wherein the filtering involves low pass filtering of 
25 the measurement data. 
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11. The method of daim 9 or 1 0, the filtering comprising a calculation of 
mean values of sub-sets of the measurement data. 

1 2. The method of any one of the preceding claims, the first code 
comprising a set of random vectors and the second code being a data 

5 vector. 

13. The method of claim 12, the random vectors being pseudo random, 
each random vector being represented by a ninning index, and further 
comprising entering a seed value for a pseudo random number 
generator in order to generate the random vectors on the basis of the 

10 seed value. 

14. The method of claim 1 2 or 1 3, further comprising determining the signs 
of scalar products of each one of the random vectors and the data 
vector for generating a third code. 

1 5. The method of claim 14, the third code being a checit code for 
15 comparison with an authentication code. 

16. The method of claim 14, the third code being a symmetric key. 

17. The method of claim 16, the object belonging to a data carrier storing 
an encrypted file, the method further comprising decrypting the file by 
means of the symmetric key. 

20 1 8. The method of claim 1 7, the first code being stored on the data carrier. 

1 9. A computer program product for perfonning a method in accordance 
with any one of the preceding claims. 

20. A logic circuit operable to perfonn a method of any one of the preceding 
claims . 



25 21. 



An electronic device for detennining the authenticity of an object, the 
electronic device comprising: 
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■ means for receiving a first code, 

- means for determining if the object lias a tliree-dimensional 
pattern of distributed particles, 

- means for perfonning a two-dimensional data acquisition for 
acquisition of a second code from the object, 

- means for detennining the authenticity on the basis of the first 
and second codes. 

22. The electronic device of daim 21 , the means for determining If the object 
has a three-dimensional pattern of distributed particles being adapted to 
perfonn the steps of: 

- acquiring first image data of the object with a first angle of 
illumination, 

- acquiring a second Image of the object with a second angle of 
iliuminatlon. 

> combining of the first and second images, 

- determining if a geometrical pattern is present in the combined 
images. 

23. The electronic device of claim 21 or 22, the means for determining if the 
object has a three-dimensional pattern of distributed particles being 
adapted to detennlne if the object is reflective. 

24. The electronic device of claim 21 , 22 or 23, the means for detennining if 
the object has a three-dimensional pattern of distributed particles being 
adapted to detennine whether the object is reflective by acquiring a first 
image with diffused illumination of the object and acquiring a second 
image with direct illumination of the object and comparing a brightness of 
the object in the first and second images. 
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25. The electronic device of any one of the preceding claims 21 to 24, the 
means for detemnining if the object has a three-dimensional pattern of 
distributed particles being adapted to perform the steps of: 

. Illuminating the object with diffused, white light, 

- detecting light leflected from the object and light transmitted 
through the object, 

. detennining if the reflected light and the transmitted light have 
complimentary colours. 

The electronic device of any one of the preceding claims 21 to 25, further 
comprising means for performing a projective transformation In order to 
compensate a dislocation of the object with respect to a reference 
position. 

A method for providing the first code for use in an authentication method, 
the method comprising: 

- providing a third code, 

- acquiring a data vector from an object representing a second 
code, 

- determining a random vector for each one of the bits of the thlnl 
code on the basis of the second code to provide the first code. 

The method of claim 27, wherein the object is an image. 

The method of claim 28, further comprising scanning the image in order 
to obtain image data and filtering the Image data to provide the data 
vector. 



26. 

10 

27. 

15 

20 28. 
29. 



30. 

25 



The method of claim 29, the filtering of the Image data comprising a 
calculation of mean values of sub-sets of the Image data. 
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31. The method of claim 30. the sub-sets of the image data being detemilned 
by a predefined grid. 

32. The method of any one of the preceding claims 27 to 31 , the third code 
being a key. 

5 33. A computer program product for perfonning a mettiod of any one of the 
preceding claims 27 to 32. 

34. A logic circuit operable to perfomi a method of any one of the preceding 
claims 27 to 32. 

35. An electronic device operable to perfonm a method of any one of the 
10 preceding claims 27 to 32. 

36. An apparatus for determining the authenticity of an object comprising: 

- a reader for reading a first code, 

. an optical component for determining if the object has a three- 
dimensional pattern of distributed particles, 

15 . a measurement component for performing a two-dimensional data 

acquisition for acquisition of a second code from the object, 

. a microprocessor for detemiining the authenticity on the basis of 
the first and second codes. 

37. A reader for a data canier, the data carrier having an object, the reader 
20 comprising: 

- a receiver for receiving a first code. 

- an optical component for determining if the object has a three- 
dimensional pattem of distributed particles, 
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- a measurement component for perfomning a two-dimensional 
data acquisition stBp for acquisition of a second code from the 
object. 

- a microprocessor for determining the authenticity of the data 
canier on the basis of the first and second codes. 

38. The reader of claim 37, the microprocessor being programmed to provide 
a third code on the basis of the first and second codes for decryption of 
mass data stored on the data canier. 

39. An electronic device for detemiining the authenticity of an object, the 
electronic device comprising: 

- an interface for entering a first code, 

- an apparatus for detenninlng if the object has a three-dimensional 
pattern of distributed particles and for perfomning a two- 
dimensional data acquisition for acquisition of a second code from 
the object, 

- a processor for determining the authenticity on the basis of the 
first and second codes. 

40. The electronic device of claim 39, the apparatus operable to detennine if 
the object is reflective. 

41 . The electronic device of claim 39 or 40, further comprising a filter for 

filtering measurement date acquired by the two-dinr»ensional date 
acquisition in order to provide the second code. 
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42. The electronic device of dalm 39. 40 or 41 , the first code comprising a 
set of random vectors and the second code being a data vector, the 
random vectors being pseudo random, and further comprising a pseudo 
random number generator to generate the random vectors on the basis 
of a seed value. 

43. The electronic device of claim 42, the processor operable to detennine the 
signs of scalar products of each one of the random vectors and the data 
vector for generating a third code. 

44. The electronic device of dalm 43. the third code being a check code for 
comparison with an authentication code. 

45. The electronic device of daim 43. the third code being a symmetric key. 



WO 2004/097730 PCT/EP2004/004539 



1/12 




-300 



302 



304 



-306 



Fig. 3 



wo 2004/097730 



10/553377 



PCT/EP2004/004539 



2/12 



Fig. 4 



Data Acquisition from Reference Object 
















Input of 1 bits B^, 83.' ... Bj, ... B, to be encrypted 








i=i 







Input of random vector R = (R^. R2, ... Rj. - Rr) 



RowjofMatrlxM = ^ 



-400 



-402 



-404 



-406 



-408 




412 



j + 1 



414 



Output M 



wo 2004/097730 



PCT/EP2004/004539 



3/12 







... rJ.^ 


Rl 


R? 

• 




... R|2^ 






rI 


... Ri.i 


r< 




Ri' 


... Ri(.i 




"1 




... r|j.i 





Fig. 5 



wo 2004/097730 



PCT/EP2004/004539 



4/12 



Date:Acquisifiqo^fi:o.ni. Referettbe 0^^^^ 



Jl 



I 



mpui of symmeittic key ,of leogwi 
<..:B,, .,.:'^1o: ^e:eBGrypted 



^600 
--602 
^-603 
1^604 




I 



696 
607 




wo 2004/097730 



10/553371! 

PCT/EP2004/004539 



5/12 




Fig. 7 



WO 2004/097730 PCT/EP2004/004539 

6/12 




Fig. 8 



wo 2004/097730 



PCT/EP2004/004539 



7/12 





wo 2004/097730 



iO/55337? 

PCT/EP2004/004539 




Fig. 10 



wo 2004/097730 



PCT/EP2004/004539 



9/12 



•1100 




I 



1101 



1102 



1104 



1106 



1107 



1108 



/OuM^.Bv&2,B.3,,..Bj B, 



1110 



1112 



Figo 11 



wo 2004/097730 



PCT/EP2004/004539 



10/12 




wo 2004/097730 



to/55337^ 

PCT/EP2004/004539 



11/12 




Fig. 15 



WO 2004/097730 PCT/EP2004/004539 



12/12 




\ 



INTERNATIONAL SEARCH REPORT 



A. CLASSinCATION OF SUBJECT MATTER 

IPC 7 G06K19/06 G06K7/14 



Int^j^onal Application No 

PCT/EP2004/004539 



Accordtflgito International Patent Classification (IPC) or to both national dasslflcatbn and IPC 



B. ^ELDS SEARCHED 



Minimum dooumentatlon aearehed (classification system followed by classification symtsols) 

IPG- i7 G06K 



Documentation searched other than minimum documentation to the extent that such documents are Included in the fields 



searched 



Electronic data base consutted during the International search (name of data base and, where pracUcai. search terms used) 

EPO-Internal , WPI Data, PAJ 



C. DOCUMENTS CONSIDERED TO BE RELEVAI^ 



Category " Citation of document, with indleatton, where appropriate, of the relevant passages 



Relevant to claim No. 



wo 01/57831 A (KAISER CLEMENT ; NOVATEC S 
A SOC (FR); BOURRIERES FRANCIS (FR)) 
9 August 2001 (2001-08-09) 

the whole document 



WO 02/50790 A (BARFOOT KEITH MICHAEL ; 
FARRALL ANDREW JOHN (GB); ALPHAFOX SYSTEMS 
LTD) 27 June 2002 (2002-06-27) 
page 4, line 1 - page 49, line 17 



1-4,7,8, 
19-24, 
27-37, 
39,40 



1-4, 

19-21, 

27-37,39 



1 I Further documents are listed In the continuation of box C. 


|X 1 Patent family membeis are Osted in annex. 


■A" document defining the general state of the art which Is not 
considered to be of particular reievance 

"E" earlier document but published on or after the international 

fiiing data 

"L" document which may throw doubts on priority ciaim(s) or 
which is cited to establish the publication date of another 
citation or other special reason (as specified) 

"O" document referring to an oral disclosure, use, exhibition or 

other means 

'P" document published prior to the international ming date but 
later than the priority date claimed 


T* later document published after the international fiiing date 
or priority date and not in conflict with the application but 
cited to understand the principle or theory undertying the 
Invention 

"X" document of particular relevance; the claimed Invention 
cannot be considered novel or cannot be considered to 
frivolve an Inventive step when the document Is talcen alone 

■Y" document of particular relevance; the claimed Invention 

cannot be -considered to involve an inventive step when the 
document is combined with one or more otlier such docu- 
ments, such combination being obvious to a person sidiled 
In the art. 

document member of the same patent family 




Date of mailing of the International search report 


17 September 2004 


08/10/2004 


Name and mailing address of the ISA 

European Patent Office, P.B. 581 8 Patentlaan 2 
NL-2280 HVRIjswijk 
Tel. <+31-70) 340-2040. Tx. 31 651 epo nl, 
Fax: <+31 -70) 340-3016 


Authorized officer 

Schmidt, R 





INTERNATIONAL SEARCH REPORT 


Int^^ional Application No 

PCT/EP2O04/004539 


Patent document 
cited In search leport 


Publication 
date 


Patent family 
member(6) 


Publication 
date 



MO 0157831 



09-08-2001 



FR 2804783 Al 

FR 2804784 Al 

AU 3196701 A 

CA 2399154 Al 

EP 1252616 Al 

WO 0157831 Al 

JP 2003521717 T 

US 2003014647 Al 



10-08- 
10-08- 

14- 08- 
09-08- 
30-10- 
09-08- 

15- 07- 

16- 01- 



2001 
2001 
2001 
2001 
2002 
2001 
2003 
2003 



UO 0250790 


A 


27-06-2002 AU 


2814802 A 


01-07-2002 






EP 


1354304 Al 


22-10-2003 






UO 


0250790 Al 


27-06-2002 






GB 


2374831 A ,B 


30-10-2002 






US 


2004112962 Al 


17-06-2004 



1=6nn PCTflSA/210 ^tent famqy annex) (January 2004) 



